The ruling that Morrisons was vicariously liable for a rogue employee’s data leak has implications for all retailers, writes lawyer Richard Hayllar.